The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to use sudo for administrative tasks such as creating system directories (/srv/samba/), modifying ownership of system paths, managing users via smbpasswd, and controlling system services through systemctl.
[COMMAND_EXECUTION]: Various shell commands are executed to manage Docker resources (docker system prune), clean system caches (apt clean), and manipulate system logs (journalctl --vacuum-size).
[PERSISTENCE]: The skill provides an example for setting up an automated cleanup task by writing a shell script into a cron directory (/etc/cron.d/docker-cleanup), which ensures code execution persists across reboots and time.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: User-provided inputs such as share names, folder paths, and device IDs are processed by the skill in SKILL.md.
Boundary markers: There are no explicit delimiters or instructions provided to isolate or ignore potentially malicious commands embedded within user-supplied data.
Capability inventory: The skill includes high-impact capabilities such as filesystem writes (tee, mkdir), permission changes (chown), and service restarts (systemctl) in SKILL.md.
Sanitization: No specific sanitization, validation, or escaping mechanisms are described for handling user-supplied strings before they are interpolated into shell commands.

storage-management